From: Pierangelo Masarati <ando@openldap.org>
Date: Mon, 24 May 2010 22:22:53 +0000 (+0000)
Subject: make sure bind credentials are consistent
X-Git-Tag: MIGRATION_CVS2GIT~590
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=d43cabbcc1f279fde59cd1b2c2f9230a2839f3c2;p=openldap

make sure bind credentials are consistent
---

diff --git a/servers/slapd/back-meta/search.c b/servers/slapd/back-meta/search.c
index 2f98806d57..c328c57a73 100644
--- a/servers/slapd/back-meta/search.c
+++ b/servers/slapd/back-meta/search.c
@@ -232,6 +232,21 @@ meta_search_dobind_init(
 
 	assert( msc->msc_ld != NULL );
 
+	if ( !BER_BVISEMPTY( &binddn ) && BER_BVISEMPTY( &cred ) ) {
+		/* bind anonymously? */
+		Debug( LDAP_DEBUG_ANY, "%s meta_search_dobind_init[%d] mc=%p: "
+			"non-empty dn with empty cred; binding anonymously\n",
+			op->o_log_prefix, candidate, (void *)mc );
+		cred = slap_empty_bv;
+		
+	} else if ( BER_BVISEMPTY( &binddn ) && !BER_BVISEMPTY( &cred ) ) {
+		/* error */
+		Debug( LDAP_DEBUG_ANY, "%s meta_search_dobind_init[%d] mc=%p: "
+			"empty dn with non-empty cred: error\n",
+			op->o_log_prefix, candidate, (void *)mc );
+		goto other;
+	}
+
 	/* connect must be async only the first time... */
 	ldap_set_option( msc->msc_ld, LDAP_OPT_CONNECT_ASYNC, LDAP_OPT_ON );